Description

An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable NULL pointer dereference and crash in TLS when an unknown TLS alert code is received.

Remediation

References

CVE-2021-28683

Related Vulnerabilities

MySQL CVE-2012-1757 Vulnerability (CVE-2012-1757)

WordPress Plugin WP Mail Logging Security Bypass (1.9.9)

MySQL CVE-2020-2761 Vulnerability (CVE-2020-2761)

WordPress Plugin Mapplic Lite Server-Side Request Forgery (1.0)

WordPress Plugin FileBird-WordPress Media Library Folders & File Manager SQL Injection (4.7.3)

Severity

High

Classification

CVE-2021-28683 CWE-476 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities